EDR: 6.1.2 Sensor Causes Endpoint Crash/BSOD

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Endpoint crash
• BSOD

Environment

• EDR Sensor: Version 6.1.2
• Microsoft Windows: All Supported Versions

Cause

The issue is due to an unexpected failure during driver startup that results in the DriverEntry() function exiting early, preventing a full initialization of the driver.

Resolution

Upgrade the sensor from version 6.1.2 to version 6.1.9 or higher.